Research / 05

Confidential AI

We explore how CPU, GPU and accelerator TEEs can support private AI workflows without obscuring their assumptions or operational limits.

Discuss this area

Questions

What we want to understand.

01

How can accelerators be attested?

02

Which parts of an AI stack must be trusted?

03

How should model and data owners verify execution?

Technical context

Architectures and systems in scope.

This list describes research scope, not endorsements, partnerships or completed evaluations.

01GPU TEEs
02Private Inference
03Model Protection
04Confidential VMs

Related directions

Work is being shaped here.

Project entries describe intended research directions and remain subject to refinement.